Factorization of a 768-bit RSA modulus

Fedor Brunner fedor.brunner at azet.sk
Fri Jan 9 01:15:20 AEDT 2015

ssh-keygen.c contains condition

     else if (type != KEY_ECDSA && type != KEY_ED25519 && *bitsp < 768)
             fatal("Key must at least be 768 bits");

Please increase the minimal RSA key length.

This paper reports on the factorization of the 768-bit number RSA-768 by
the number field sieve factoring method

More information about the openssh-unix-dev mailing list